Cloud Software Group Product Security seeks a PSIRT Senior Security Engineer. This will be an individual contributor role responsible for the management and resolution of security incidents involving all Cloud Software Group products and services. A successful candidate in this role will be able to drive the security incident end to end working alongside technical, legal, and executive teams. Leverage the technical team and backstop investigation into reported issues in broad, complex and unique environments with mixed products and protocols.
 

Roles and Responsibilities

• Triage new vulnerability reports and ensure root cause analysis of vulnerabilities is conducted alongside technical leads
• Work closely with product management, engineering and sustaining teams to drive issues to resolution
• Establish appropriate team ownership and help drive remediation activities
• Engage eternal teams such as PR, Legal, etc. as required
• Track information appropriately for easy access across multiple stakeholders
• Continually enhance existing product security incident response processes
• Status and summary reporting to executive teams, communication with security researchers and customers
• Assemble and lead cross-org virtual teams to resolve security incidents
• Write and publish CVE announcements and security advisories

Basic Qualifications

• At least 6 years of experience in security-related field, preferably 2+ years in incident response / PSIRT
• Bachelor's Degree in Computer Science, Risk Management, Information Systems, or related field, or equivalent professional experience
• Basic understanding of legal, regulatory and compliance requirements such as PCI, HIPAA, etc.
• Demonstrated ability to drive complex, cross-organizational initiative through influencing and negotiating with stakeholders with differing priorities
• Solid understanding of OWASP Top 10
• Excellent verbal and written communication skills

Preferred Qualifications

• Experience with Bug Bounty Programs
• Experience implementing Incident Response processes
• Experience in PSIRT
• Experience with SIEM event correlation
• Experience with scripting or log analysis tools
• Demonstrated ability to operate effectively in a fast-paced environment with competing and shifting priorities
• Ability to confidently and effectively discuss complex technical topics with senior non-technical audiences
• Familiarity with incident handling standards and related certifications (ISO29147, ITIL, FEMA, ICS, etc.)

About Us:

Cloud Software Group is one of the world’s largest cloud solution providers, serving more than 100 million users around the globe. When you join Cloud Software Group, you are making a difference for real people, each of whom count on our suite of cloud-based products to get work done — from anywhere. Members of our team will tell you that we value passion for technology and the courage to take risks.  Everyone is empowered to learn, dream, and build the future of work. We are on the brink of another Cambrian leap -- a moment of immense evolution and growth. And we need your expertise and experience to do it. Now is the perfect time to move your skills to the cloud.

Cloud Software Group is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination. All qualified applicants will receive consideration for employment without regard to age, race, color, creed, sex or gender, sexual orientation, gender identity, gender expression, ethnicity, national origin, ancestry, citizenship, religion, genetic carrier status, disability, pregnancy, childbirth or related medical conditions (including lactation status), marital status, military service, protected veteran status, political activity or affiliation, taking or requesting statutorily protected leave and other protected classifications.

If you need a reasonable accommodation due to a disability during any part of the application process,  please email us at AskHR@cloud.com for assistance.